Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/322e35382e38322e302f32342d3234203d3e2030.roa
File:                     322e35382e38322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          /mt2awDNCfkHJdcqmlEntEPGkjwwpeVG9xti8Ac4mec=
Subject key identifier:   17:A0:31:7E:6C:38:42:EC:5A:2C:38:2D:00:3A:D3:EC:06:80:B8:B9
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       0FA7BA053247253B961250B562616C7BEF86F428
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/322e35382e38322e302f32342d3234203d3e2030.roa
Signing time:             Mon 04 Jul 2022 15:43:03 +0000
ROA not before:           Mon 04 Jul 2022 15:38:03 +0000
ROA not after:            Mon 03 Jul 2023 15:43:03 +0000
asID:                     0
IP address blocks:        2.58.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a7:ba:05:32:47:25:3b:96:12:50:b5:62:61:6c:7b:ef:86:f4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Jul  4 15:38:03 2022 GMT
            Not After : Jul  3 15:43:03 2023 GMT
        Subject: CN=17A0317E6C3842EC5A2C382D003AD3EC0680B8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ce:bb:60:81:89:f2:db:c3:c2:c7:49:98:04:
                    07:22:fb:4c:39:ae:96:30:e8:f6:2c:f8:1c:ce:e2:
                    e8:d1:cc:45:bc:af:d8:b4:4b:e6:bc:84:0b:02:81:
                    24:e1:5a:8b:35:7a:ea:09:18:93:48:ba:2b:fa:2a:
                    91:c1:fd:7b:2a:f6:29:8b:0f:a7:d8:e8:de:3b:21:
                    50:aa:a7:3a:b2:c6:3e:24:a6:b0:95:5f:9c:65:e7:
                    49:75:e5:11:7a:24:33:a0:ef:2d:55:e3:bb:6f:b2:
                    11:88:34:a5:98:c9:8d:83:86:06:3b:81:45:84:20:
                    46:51:c3:c4:20:c5:44:5f:93:37:a5:ff:7d:0c:57:
                    a9:b4:62:ab:a3:91:d1:6c:66:0c:ef:dd:fb:60:fa:
                    ec:2f:4d:8a:fd:52:7c:31:9a:62:ba:a2:8b:24:f8:
                    d2:f4:47:44:b7:cd:60:b8:bf:a6:64:77:3d:90:71:
                    07:67:d8:cb:f4:05:b1:36:aa:ec:2e:bb:81:c1:1d:
                    8e:20:16:c8:7a:35:8a:4b:3c:d4:52:8a:91:7d:38:
                    10:ac:ff:4e:eb:55:1f:85:a0:34:f3:27:18:e2:4a:
                    39:9f:9d:5a:8d:a4:1b:1f:8f:8a:6b:4b:47:2e:d7:
                    c0:89:68:12:8c:99:c5:6d:c4:5f:b9:8d:55:38:a1:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A0:31:7E:6C:38:42:EC:5A:2C:38:2D:00:3A:D3:EC:06:80:B8:B9
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/322e35382e38322e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:b4:1e:1b:1b:b3:09:11:24:51:ea:f5:c5:39:c8:dd:31:
         13:81:13:75:c0:0a:04:72:37:2b:25:13:a6:53:30:16:d2:b5:
         d4:23:42:be:a8:fa:2a:2e:7d:cb:2d:82:7a:9b:b1:19:fd:28:
         a5:f5:43:28:6f:bf:81:a8:43:82:32:8f:93:b1:0b:69:dd:56:
         99:7e:5a:d6:0b:b2:ff:b9:ff:a7:80:ab:2a:32:24:fa:77:15:
         58:3c:1c:cd:59:85:0a:e9:f4:1e:9e:66:b3:41:29:5e:14:69:
         78:e9:50:ea:24:a5:50:3e:32:64:51:a8:46:f1:ef:c8:7a:0a:
         67:a3:fd:f7:38:2d:cc:52:02:a2:a2:b2:df:48:65:df:ab:86:
         1a:a8:98:75:aa:28:6c:f6:e8:8e:db:8b:4e:c0:90:d8:6f:9c:
         3e:36:0b:40:cc:02:95:16:5e:6d:b6:fb:c1:01:2e:8e:2e:07:
         82:49:75:de:49:59:83:6c:eb:cd:3c:40:77:71:5e:6d:51:13:
         11:ad:24:7f:d4:fe:d4:07:4a:9a:40:fc:83:60:37:9b:81:58:
         2a:8f:64:71:71:b6:85:cc:7d:75:f5:e4:9b:dd:c0:31:16:a7:
         fd:be:93:b5:bb:26:8a:78:e0:72:65:09:34:8b:0a:cd:a2:10:
         ec:79:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net